Skip to content

Commit

Permalink
Merge pull request #1538 from smeet07/patch-1
Browse files Browse the repository at this point in the history 
documents when to avoid setting anon auth command line option
  • Loading branch information
@cfryanr
cfryanr authored Jun 1, 2023
2 parents d4b20b3 + 4f3c081 commit 533c41f
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions site/content/docs/reference/supported-clusters.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -37,3 +37,6 @@ token credential request API strategy by default.

To choose the strategy to use with the concierge, use the `--concierge-mode` flag with `pinniped get kubeconfig`.
Possible values are `ImpersonationProxy` and `TokenCredentialRequestAPI`.

Do not use the command line option `--anonymous-auth=false` in the `kube-apiserver` CLI for a cluster that does not use the impersonation proxy strategy. This is because the `kube-apiserver` blocks unauthenticated access to the TokenCredentialRequest API of the Concierge, which will prevent users from being able to authenticate.
This does not matter while using the impersonation proxy strategy, which will allow these TokenCredentialRequests requests anyway.

0 comments on commit 533c41f

Please sign in to comment.